cors policy updated

suyash-patil · Dec 11, 2022 · 58768d0 · 58768d0 · vercel · Dec 11, 2022
1 parent ba4147e
commit 58768d0
Show file tree

Hide file tree

Showing 6 changed files with 43 additions and 4 deletions.
diff --git a/backend/routes/orderRoutes.js b/backend/routes/orderRoutes.js
@@ -7,6 +7,7 @@ import Order from '../models/orderModel.js'
 router.post('/',expressAsyncHandler(async (req,res) => {
   const {orderItems, shippingAddress, paymentMethod, itemPrice, taxPrice, shippingPrice, totalPrice,_id} = req.body
   if(orderItems && orderItems.length === 0){
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(400)
     throw new Error('No items')
     return
@@ -23,6 +24,7 @@ router.post('/',expressAsyncHandler(async (req,res) => {
       totalPrice
     })
     const createdOrder = await order.save()
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(201).json(createdOrder)
   }
 }))
@@ -31,9 +33,11 @@ router.get('/:id', expressAsyncHandler(async (req, res) => {
   const order = await Order.findById(req.params.id).populate('user','name email')
 
   if(order) {
+    res.header("Access-Control-Allow-Origin", "*");
     res.json(order)
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('Not found')
   }
@@ -53,9 +57,11 @@ router.put('/:id/pay', expressAsyncHandler(async (req, res) => {
       email_address: req.body.payer.email_address
     }
     const updatedOrder = await order.save()
+    res.header("Access-Control-Allow-Origin", "*");
     res.json(updatedOrder)
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('Not found')
   }
@@ -65,6 +71,7 @@ router.put('/:id/pay', expressAsyncHandler(async (req, res) => {
 router.get('/getorders/:id',expressAsyncHandler(async(req,res) =>{
   const orders = await Order.find({user:req.params.id})
   if(orders) {
+    res.header("Access-Control-Allow-Origin", "*");
     res.json(orders)
   }
   else {
@@ -76,6 +83,7 @@ router.get('/getorders/:id',expressAsyncHandler(async(req,res) =>{
 router.post('/getallorders', expressAsyncHandler(async (req, res) => {
   const orders = await Order.find({}).populate('user','id name')
   if(orders) {
+    res.header("Access-Control-Allow-Origin", "*");
     res.json(orders)
   }
   else {
@@ -91,9 +99,11 @@ router.put('/:id/delivered', expressAsyncHandler(async (req, res) => {
     order.isDelivered = true
     order.deliveredAt = Date.now()
     const updatedOrder = await order.save()
+    res.header("Access-Control-Allow-Origin", "*");
     res.json(updatedOrder)
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('Not found')
   }

diff --git a/backend/routes/productRoutes.js b/backend/routes/productRoutes.js
@@ -6,6 +6,7 @@ import Product from '../models/productModel.js'
 router.get('/', expressAsyncHandler(async (req, res) => {
   const products = await Product.find({})
   if(products) {
+    res.header("Access-Control-Allow-Origin", "*");
     res.json(products)
   }
   else {
@@ -17,6 +18,7 @@ router.get('/', expressAsyncHandler(async (req, res) => {
 router.get('/:id', expressAsyncHandler(async (req, res) => {
   const product = await Product.findById(req.params.id)
   if(product) {
+    res.header("Access-Control-Allow-Origin", "*");
     res.json(product)
   }
   else {
@@ -38,9 +40,11 @@ router.route('/:id/review').post(expressAsyncHandler(async(req,res) => {
     product.numReviews = product.reviews.length
     product.rating = Number(product.reviews.reduce((acc, item) => item.rating + acc, 0) / product.reviews.length).toFixed(1)
     await product.save()
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(201).json(product)
 
   } else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('Product not found')
   }
@@ -50,9 +54,11 @@ router.route('/delete/:id').delete(expressAsyncHandler(async(req,res) => {
   const product = await Product.findById(req.params.id)
   if(product){
     await product.remove()
+    res.header("Access-Control-Allow-Origin", "*");
     res.json({message:'Product removed'})
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('Product not found')
   }
@@ -71,6 +77,7 @@ router.route('/create').post(expressAsyncHandler(async (req, res) => {
     description: description
   })
   const createdProduct = await product.save()
+  res.header("Access-Control-Allow-Origin", "*");
   res.status(201).json(createdProduct)
 
 }))
@@ -88,9 +95,11 @@ router.route('/update/:id').put(expressAsyncHandler(async (req, res) => {
     product.countInStock = countInStock
 
     const updatedProduct = await product.save()
+    res.header("Access-Control-Allow-Origin", "*");
     res.json(updatedProduct)
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('Product not found')
   }

diff --git a/backend/routes/userRoutes.js b/backend/routes/userRoutes.js
@@ -9,6 +9,7 @@ router.post('/login', expressAsyncHandler(async (req,res) => {
   const {email, password} = req.body
   const user = await User.findOne({email: email})
   if(user && await user.matchPass(password)){
+    res.header("Access-Control-Allow-Origin", "*");
     res.json({
         _id: user._id,
         name: user.name,
@@ -20,6 +21,7 @@ router.post('/login', expressAsyncHandler(async (req,res) => {
       })
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('Invalid email or password')
   }
@@ -29,6 +31,7 @@ router.route('/profile').post(expressAsyncHandler(async (req, res) => {
   const {email} = req.body
   const user = await User.findOne({email:email})
   if(user) {
+    res.header("Access-Control-Allow-Origin", "*");
     res.json({
       _id: user._id,
       name: user.name,
@@ -58,6 +61,7 @@ router.route('/profile/update').put( expressAsyncHandler(async (req, res) => {
       user.password = newpass
     }
     const updatedUser = await user.save()
+    res.header("Access-Control-Allow-Origin", "*");
     res.json({
       _id: updatedUser._id,
       name: updatedUser.name,
@@ -70,6 +74,7 @@ router.route('/profile/update').put( expressAsyncHandler(async (req, res) => {
 
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('User not found')
   }
@@ -81,6 +86,7 @@ router.route('/register').post( expressAsyncHandler(async (req, res) => {
   const userExist = await User.findOne({email:email})
 
   if(userExist) {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(401)
     throw new Error('User already exist')
   }
@@ -91,6 +97,7 @@ router.route('/register').post( expressAsyncHandler(async (req, res) => {
       password
     })
     if (user) {
+      res.header("Access-Control-Allow-Origin", "*");
       res.status(201).json({
         _id: user._id,
         name: user.name,
@@ -102,6 +109,7 @@ router.route('/register').post( expressAsyncHandler(async (req, res) => {
       })
     }
     else {
+      res.header("Access-Control-Allow-Origin", "*");
       res.json(401)
       throw new Error('Invalid Email and Password')
 
@@ -111,23 +119,27 @@ router.route('/register').post( expressAsyncHandler(async (req, res) => {
 
 router.route('/').post(admin, expressAsyncHandler(async (req, res) => {
   const users = await User.find({})
+  res.header("Access-Control-Allow-Origin", "*");
   res.json(users)
 }))
 
 router.route('/delete/:id').delete(expressAsyncHandler(async (req, res) => {
   const user = await User.findById(req.params.id)
   if(user) {
     await user.remove()
+    res.header("Access-Control-Allow-Origin", "*");
     res.json({message: 'User removed'})
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('User not found')
   }
 }))
 
 router.route('/getuser/:id').get(expressAsyncHandler(async(req,res) => {
   const user = await User.findById(req.params.id)
+  res.header("Access-Control-Allow-Origin", "*");
   res.json({
     _id: user._id,
     name: user.name,
@@ -147,6 +159,7 @@ router.route('/edituser/:id').put(expressAsyncHandler(async(req,res) => {
     user.isAdmin = isAdmin
 
     const updatedUser = await user.save()
+    res.header("Access-Control-Allow-Origin", "*");
     res.json({
       _id: updatedUser._id,
       name: updatedUser.name,
@@ -158,6 +171,7 @@ router.route('/edituser/:id').put(expressAsyncHandler(async(req,res) => {
     })
   }
   else {
+    res.header("Access-Control-Allow-Origin", "*");
     res.status(404)
     throw new Error('User not found')
   }

diff --git a/backend/server.js b/backend/server.js
@@ -31,7 +31,10 @@ app.use('/api/users',userRoutes)
 
 app.use('/api/order',orderRoutes)
 
-app.get('/api/config/paypal',(req,res) => res.send(process.env.PAYPAL_CLIENT_ID))
+app.get('/api/config/paypal',(req,res) => {
+  res.header("Access-Control-Allow-Origin", "*");
+  res.send(process.env.PAYPAL_CLIENT_ID)
+})
 
 
 app.use(bodyParser.urlencoded({extended:true}))
@@ -46,17 +49,20 @@ app.post('/api/create-pdf',(req,res) => {
   })
 })
 app.get('/api/fetch-pdf',(req,res) => {
+  res.header("Access-Control-Allow-Origin", "*");
   res.sendFile('result.pdf',{root: '.'})
 })
 
 const __dirname = path.resolve()
 if(process.env.NODE_ENV === 'production') {
   app.use(express.static(path.join(__dirname, '/client/build')))
   app.get('*',(req,res) => {
+    res.header("Access-Control-Allow-Origin", "*");
     res.sendFile(path.resolve(__dirname,'client','build','index.html'))
   })
 } else {
   app.get('/', (req,res) => {
+    res.header("Access-Control-Allow-Origin", "*");
     res.send('API is running...')
   })
 }

diff --git a/client/src/screens/HomeScreen.js b/client/src/screens/HomeScreen.js
@@ -11,7 +11,7 @@ const HomeScreen = () => {
 
   useEffect(() => {
       const fetchProducts = async () => {
-        const { data } = await axios.get('http://localhost:5000/api/products')
+        const { data } = await axios.get('https://covercove-oa4q.vercel.app/api/products')
         setProducts(data)
         setLoading(false)
       }

diff --git a/client/src/screens/ProductScreen.js b/client/src/screens/ProductScreen.js
@@ -21,7 +21,7 @@ const ProductScreen = ({history, match,setCartItems,cartItems}) => {
   const [name,setName] = useState('')
   useEffect(() => {
     const fetchProduct = async () => {
-      const {data} = await axios.get(`http://localhost:5000/api/products/${match.params.id}`)
+      const {data} = await axios.get(`https://covercove-oa4q.vercel.app/api/products/${match.params.id}`)
       setProduct(data)
       setLoading(false)
       if(localStorage.getItem('userInfo')){
@@ -41,7 +41,7 @@ const ProductScreen = ({history, match,setCartItems,cartItems}) => {
     }
     try {
       const { _id, name } = JSON.parse(localStorage.getItem('userInfo'))
-      const { data } = await axios.post(`http://localhost:5000/api/products/${match.params.id}/review`, { rating, comment, name, _id })
+      const { data } = await axios.post(`https://covercove-oa4q.vercel.app/api/products/${match.params.id}/review`, { rating, comment, name, _id })
       setReviewModal(false)
       message.success("Review submitted successfully")
     } catch (error) {